To enable the use of Control-M for Microsoft Power BI plug-in, perform the following setup tasks in Azure:

• • Registering Your Application for Power BI
  • Adding API permissions
  • Disabling Multi-factor Authentication (for Username and Password Authentication)
  • Enabling Service Principal Authentication

Registering Your Application for Power BI

To connect your Power BI application with the Azure Portal, register your application with Azure Active Directory (Azure AD). Step-by-step instructions are available in the Microsoft Power BI website. For more details and information, see Register an Azure AD application to use with Power BI in the Microsoft Power BI documentation.

At the end of the registration process, you are granted a client (application) ID and a client secret.

Adding API permissions

1. In the Azure Portal, select Azure Active Directory > App registrations, and then identify and select your client application.
   In the following example, we choose the apiconnect application.
   
2. Select API permissions.
3. On the API permissions screen, select Add a permission.
   
4. In  the Request API Permissions pane, select Power BI Service.
   
5. Click Delegated Permissions.
6. Select all delegated permissions, including all permissions in the following categories: Content, Dashboard, Dataset, Pipeline, Report, Workspace
   
7. Click Add permissions.
8. On the API permissions screen, click Grant Admin Consent for <your username>.
9. Click Yes to confirm.
   

Disabling Multi-factor Authentication (for Username and Password Authentication)

The user that Control-M uses to connect to Power BI must not be subject to the enforcement of Multi-factor authentication (MFA) by MFA solutions such as Okta, CyberArk, or Azure MFA.

The following steps describe how to disable MFA in Azure MFA:

1. In the Azure Portal, browse to Azure Active Directory > Properties for your tenant.
2. Select Manage security defaults.
   
3. Set the Enable security defaults toggle to No.
   
   Multi-factor authentication (MFA) requirements are turned off.
4. Select Save.
5. Ensure that MFA is disabled for your service user through the Multifactor Verification page.
   

Enabling Service Principal Authentication

The following steps describe how to enable service principal authentication.

1. In the Power BI settings, click Admin Portal (under Governance and Insights).
   

2. In the Admin Portal, in Tenant settings, scroll down to the Developer settings section, and then expand and enable Service principals can use Fabric APIs.
   

   Note

   You can optionally choose to apply this only to specific security groups or to exclude specific security groups in your organization.

3. Navigate to Power BI Workspaces and, for the relevant workspace, select Workspace access.
   
4. Click + Add people or groups.
   
5. Type the name of the registered app, select a role (not Viewer), and then click Add.
   
   The new app is added to the list.